[Question] Glob BO

[Question] Glob BO
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
[Question] Glob BO p00lb0y 04-26-2006
Posted by p00lb0y on April 26, 2006, 4:58 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello all.

I am looking for information regarding the Glob BO Trojan that
occasionally gets picked up by Norton Internet Security on Windows XP
Home Edition SP2. Data at the SARC site indicate it is a threat, but
further state "It does not require immediate action". Would someone
explain if this is a real threat or not?

Here is the SARC link:

http://securityresponse.symantec.com/avcenter/attack_sigs/s20430.html

Thanks,

PB

Posted by David H. Lipman on April 26, 2006, 7:51 am
If you were  Registered and logged in, you could reply and use other advanced thread options

| Hello all.
|
| I am looking for information regarding the Glob BO Trojan that
| occasionally gets picked up by Norton Internet Security on Windows XP
| Home Edition SP2. Data at the SARC site indicate it is a threat, but
| further state "It does not require immediate action". Would someone
| explain if this is a real threat or not?
|
| Here is the SARC link:
|
| http://securityresponse.symantec.com/avcenter/attack_sigs/s20430.html
|
| Thanks,
|
| PB

It is an exploitation attempt on the BSD FTP Daemon.

There is no Glob BO Trojan. It is an exploitation of the FTP Daemon's glob()
function.

If you are on Broadband then get a Cable/DSL Router such as the Linksys BEFSR41.
Then the
Router, not a LAN node, will see this activity and you won't be bothered by such
FireWall
messages.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by Malke on April 26, 2006, 7:56 am
If you were  Registered and logged in, you could reply and use other advanced thread options
p00lb0y wrote:

> Hello all.
>
> I am looking for information regarding the Glob BO Trojan that
> occasionally gets picked up by Norton Internet Security on Windows XP
> Home Edition SP2. Data at the SARC site indicate it is a threat, but
> further state "It does not require immediate action". Would someone
> explain if this is a real threat or not?
>
> Here is the SARC link:
>
> http://securityresponse.symantec.com/avcenter/attack_sigs/s20430.html

If you Google "glob BO trojan" you will get lots of links with in-depth
information about this trojan.

You can submit the file to VirusTotal. They will send it to many
antivirus companies and send you back a report about how each av
company views it:
ttp://www.virustotal.com/flash/index_en.html

You can also run David Lipman's Multi_AV which is a first-line antivirus
tool that uses 4 different av scanners.

http://www.ik-cs.com/multi-av.htm - how to use Dave Lipman's Multi-AV
http://www.ik-cs.com/programs/virtools/Multi_AV.exe - Multi-AV download
http://pcdid.com/Multi_AV.htm - additional Multi_AV instructions

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Similar ThreadsPosted
AVG Free question July 27, 2005, 4:58 pm
Multi AV Question October 28, 2005, 12:36 am
Re: WMF Exploit question January 5, 2006, 3:31 pm
Re: WMF Exploit question January 5, 2006, 4:33 pm
just a quick question January 7, 2006, 1:50 pm
Question about AVG or AVAST February 16, 2006, 5:10 am
Mr. Pandaman, a question for you ? March 4, 2006, 5:01 pm
computer question August 5, 2006, 4:14 pm
Trojan Question April 27, 2007, 12:00 am
Another Question about A/V tool June 8, 2008, 9:56 am

The site map in XML format XML site map

Contact Us | Privacy Policy